Menu

Updated 4 November 2026Based on CyberFundamentals Basic (CCB), simplified

The news is about supermarkets and ministries. You have the same doors.

A refrigeration unit without updates, a login stolen from an IT provider, one click on an email. Walk through the eight inspection points below: each shows what happened in Belgium this year, and asks how things stand at your company. Your answers stay in your browser.

  1. Point 1

    Updates, also on the devices you forget

    Oct–Nov 2026

    Refrigeration in some 700 French supermarkets is tampered with remotely; in early November dozens of Belgian stores follow. The manufacturers point to outdated controllers that no longer receive security updates.

    Source: AP via PBS, NL Times

    Printers, cameras, NAS devices, routers and building management sit on your network too. Whatever no longer gets updates stays open for good.

    Do all your devices, including printers, cameras and routers, still receive security updates, and are they actually installed?

  2. Point 2

    Your IT provider's keys

    June 2026

    At least 270 Belgian organisations are hit through Fortinet firewalls. The attackers use logins stolen from IT service providers, and create their own accounts in at least 45 systems to stay inside.

    Source: The Brussels Times

    Whoever manages your IT has access to your network. That access must be secured at least as well as your own accounts.

    Do you know who can log in to your network and firewall from outside, and is every one of those logins protected with two-step verification?

  3. Point 3

    Two-step verification on email and cloud

    Jan–Sep 2026

    In the first nine months of 2026 the CCB already counts 156 account takeovers at Belgian businesses, more than in all of 2025 (144).

    Source: The Brussels Times

    With two-step verification a stolen password alone is not enough. It is the cheapest measure with the biggest effect.

    Does everyone in your company use two-step verification for email and online services?

  4. Point 4

    Recognising phishing, and reporting it

    Q1 2026

    The CCB receives on average more than 40,000 phishing reports a day, roughly double the year before.

    Source: La Libre (FR)

    Most attacks start with one click. An employee who hesitates and reports it is your fastest alarm.

    Do your employees know how to recognise phishing, and where to report a suspicious message?

  5. Point 5

    A backup you have actually restored

    13 January 2026

    A cyberattack takes down the systems of AZ Monica hospital in Antwerp. At least 70 surgeries are cancelled and seven patients are moved to another hospital.

    Source: Wikipedia

    According to ENISA, ransomware remains the biggest threat in Europe. A backup that can be deleted from your network goes down with it, and a backup that was never restored is a hope.

    Do you have a backup that cannot be deleted from your own network, and have you tested restoring it in the past year?

  6. Point 6

    Would anyone notice?

    Jan–Sep 2026

    Between 1 January and 28 September 2026 the CCB receives 588 reports of cyber incidents at Belgian businesses, already more than in all of 2025 (556).

    Source: ITdaily

    Attackers are often inside for a while before they strike. Whoever spots the anomaly, a new account or data leaving at night, stops it before the damage is done.

    Would anyone notice if a new administrator account appeared at night, or large amounts of data left your network?

  7. Point 7

    Knowing what to do in the first hour

    28 October 2026

    The federal finance service (FOD Financiën) takes MyMinfin and other online services offline as a precaution after a cyberattack, and extends tax filing deadlines.

    Source: Euronews

    Disconnecting, informing people, arranging extra time: it only works if it was thought through beforehand. Nobody improvises well under pressure.

    Do you know what to do, and who to call, in the first hour of an attack?

  8. Point 8

    Ready for your customers' questions

    18 April 2026

    The first Belgian NIS2 deadline for essential entities passes. The next milestone follows in April 2027.

    Source: Safeonweb@work (CCB)

    Companies under NIS2 must also assess the security of their suppliers. Even if NIS2 does not apply to you, the questionnaire will still reach you.

    Could you answer a customer's NIS2 questionnaire today, with evidence?
0 of 8 answeredTo your report

Your report is still empty.

Mark how things stand at each point. Rather talk straight away? That's fine too.

Let's talk

Your answers only leave your browser when you press a button or link. Then a short summary goes along with your request or ticket.

What we do

Every inspection point above, turned into work. Where something isn't ours to do, we say so.

Parts list

  1. Cyber basics scan

    One-off, on site and remotely: we map what is there and check it against CyberFundamentals Basic. You get a report and a roadmap.

    • Inventory, including devices without updates
    • Mail domain: SPF, DKIM, DMARC
    • Two-step verification and admin accounts
    • Restore test of your backup

  2. Detection and monitoring

    Logs and alerts from your devices, firewall and cloud services are followed day and night. AI agents flag anomalies, a specialist assesses them and steps in.

    • Followed day and night
    • AI agents for detection
    • A person decides
    • Monthly report

  3. Secured management

    Updates, endpoint protection, mail filtering and backups, managed for a fixed monthly price.

    • Patch management
    • Antivirus and EDR
    • Mail and spam filtering
    • Backups in Belgium or the EU

  4. NIS2 support for suppliers

    We help you answer your customer's questionnaire and bring your measures to the Basic level of CyberFundamentals. The official verification is done by an accredited body.

    • Customer questionnaires
    • Policies on paper
    • Preparing for a verification

  5. Awareness

    Short sessions and practice emails that teach your team to hesitate at the right moment.

    • Sessions tailored to your team
    • Practice phishing
    • A fixed reporting route

NIS2 in short

What the European directive means for a Belgian SME.

Who it covers
Medium-sized and large companies in 18 sectors, from 50 employees or more than € 10 million turnover, plus some smaller ones in critical roles.
Everyone else
Companies under NIS2 must also assess their suppliers. That is how the questionnaire reaches smaller businesses too.
The framework
In Belgium it is the CCB's CyberFundamentals, with the levels Small, Basic, Important and Essential.
Next date
18 April 2027
Who verifies officially
A conformity assessment body accredited by the CCB. Not us, and not this check.
Funding
Flanders: VLAIO's cybersecurity improvement programmes. Wallonia: the chèque cybersécurité. Both through approved providers.

The first hour after an attack

  1. Take it off the network

    Unplug network cables and switch off wifi on affected devices. Do not shut them down: what is in memory helps the investigation.

  2. Call your IT partner

    Before you do anything else. We are reachable 24/7. Do not pay a ransom or contact the attackers without advice.

  3. Report it

    To the CCB and to the police. If NIS2 applies to you, a first notification is due within 24 hours.

  4. Think of personal data

    If personal data has leaked, report it to the Data Protection Authority within 72 hours.

Also worth knowing

  1. This check is a simplified self-inspection based on the CCB's CyberFundamentals Basic. It is not an official assessment.
  2. The findings come from public reporting and figures from the CCB and ENISA, with the source at each inspection point. Updated 4 November 2026.
  3. Received a suspicious email? Forward it to suspicious@safeonweb.be.
  4. Already a customer? Raise questions and incidents through a support ticket in your account. Go to your tickets
  5. Security is part of our management. See managed services
  6. Firewalls and networks? See network & IT support

Want to know where you really stand?

We go through your report together, or start with a cyber basics scan at your company.

Let's talk